This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/9NcfTMLVoNSYpzrSkWvCRuMOb5Q.roa File: 9NcfTMLVoNSYpzrSkWvCRuMOb5Q.roa (raw, json) Hash identifier: mlHMZG1glKs9hrx1o4pEeWTBfTmCOu0t+uHHFDpEA0Y= Subject key identifier: F4:D7:1F:4C:C2:D5:A0:D4:98:A7:3A:D2:91:6B:C2:46:E3:0E:6F:94 Certificate issuer: /CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca Certificate serial: 019B7B35E3FE63C0C014160106D16A728046 Authority key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/9NcfTMLVoNSYpzrSkWvCRuMOb5Q.roa Signing time: Thu 01 Jan 2026 20:18:07 +0000 ROA not before: Thu 01 Jan 2026 20:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208124 IP address blocks: 91.209.161.0/24 maxlen: 24 185.160.205.0/24 maxlen: 24 2a10:b240::/29 maxlen: 29 2a10:c4c0::/29 maxlen: 29 2a12:8840::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e3:fe:63:c0:c0:14:16:01:06:d1:6a:72:80:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca Validity Not Before: Jan 1 20:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4d71f4cc2d5a0d498a73ad2916bc246e30e6f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bc:97:17:89:ec:20:56:6d:da:5c:6e:47:40: f8:8f:10:f3:e4:2c:4e:31:bf:39:6c:30:c9:41:f2: 81:8d:32:1a:06:dc:44:52:db:ba:17:b2:83:8e:a6: 2a:59:4d:32:1b:27:c2:6f:fe:18:1e:11:8e:df:31: 2f:30:a7:19:29:a0:5e:13:a0:ab:ec:2c:1c:f0:26: ea:38:c3:9a:20:33:c4:8f:a9:75:a6:b4:4e:f2:b8: d0:71:76:8f:6b:0a:3c:8f:12:a0:3c:fb:b9:56:96: 6f:2d:89:29:a5:cd:90:49:32:5c:07:eb:5d:51:80: 29:40:dd:00:c8:92:3d:01:ae:e1:44:c4:3c:e0:96: 7f:ee:9f:c3:f6:d1:ef:61:c3:69:58:40:38:4f:60: 96:31:29:27:73:7e:6f:1d:6d:51:a0:5a:47:ab:68: 85:d6:5f:be:87:10:54:18:71:3e:44:2b:26:5d:24: cf:c6:07:b8:1a:96:53:78:7b:2d:d6:b0:73:21:b1: 20:ab:28:b1:bd:a1:f7:95:e1:4c:d8:d4:ea:04:1a: a6:47:65:54:6c:33:70:d6:ad:d8:1e:2d:be:97:a2: a8:a0:1c:ed:03:86:0b:7c:9d:56:fa:5f:c0:a1:16: 4c:1e:cd:f3:f6:0a:ea:d6:c5:16:ac:6d:8f:65:fe: 93:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D7:1F:4C:C2:D5:A0:D4:98:A7:3A:D2:91:6B:C2:46:E3:0E:6F:94 X509v3 Authority Key Identifier: keyid:B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/9NcfTMLVoNSYpzrSkWvCRuMOb5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.161.0/24 185.160.205.0/24 IPv6: 2a10:b240::/29 2a10:c4c0::/29 2a12:8840::/29 Signature Algorithm: sha256WithRSAEncryption 0a:6b:71:f5:9c:6a:7e:41:75:db:69:d7:ea:5f:2a:17:59:0e: b5:8b:bf:8a:8c:64:df:0e:f3:a6:43:4a:a5:fd:a2:c7:58:9d: 12:ac:aa:f5:2a:2f:a3:59:0c:fb:6f:23:ad:b8:e8:c5:62:40: 29:5d:da:17:60:9f:12:da:81:99:5a:a6:9e:df:3c:03:a9:e2: 8c:5d:89:b2:57:98:66:eb:52:d7:12:98:45:ed:44:0c:aa:7f: df:c0:d9:f5:20:03:a1:3e:6d:2c:a5:eb:e0:36:9a:51:aa:d6: 5f:79:77:30:2f:da:82:1c:33:a9:2e:59:ec:70:48:f6:3c:1a: 2c:7b:2c:4d:b3:ee:ed:c9:0d:cc:4a:56:7c:aa:fd:c2:36:96: c9:4d:25:09:6b:c9:85:05:62:5a:41:a1:14:d3:cd:9d:22:ba: 0d:1c:17:32:da:41:9d:91:9c:d6:e9:36:94:e8:34:0e:44:fb: 9e:63:5f:83:d2:b8:e6:0f:07:dc:04:2e:f2:48:48:69:8a:88: 28:60:92:66:37:be:7c:0e:78:f5:04:3b:3d:11:09:d8:14:cc: 32:6e:b7:31:68:ae:60:88:9a:67:fb:49:0c:f0:95:65:fb:af: 08:4a:4b:c9:90:c0:d4:67:6a:8b:f6:0b:e5:6e:a4:17:b6:24: 93:a2:1e:f2 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt7NeP+Y8DAFBYBBtFqcoBGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZGFmYTdlYTU1MzE3ODEzM2U3ZTg0ZmVlYjhhYzNhOWRi Y2Y5Y2EwHhcNMjYwMTAxMjAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGQ3MWY0Y2MyZDVhMGQ0OThhNzNhZDI5MTZiYzI0NmUzMGU2Zjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbyXF4nsIFZt2lxuR0D4jxDz5CxO Mb85bDDJQfKBjTIaBtxEUtu6F7KDjqYqWU0yGyfCb/4YHhGO3zEvMKcZKaBeE6Cr 7Cwc8CbqOMOaIDPEj6l1prRO8rjQcXaPawo8jxKgPPu5VpZvLYkppc2QSTJcB+td UYApQN0AyJI9Aa7hRMQ84JZ/7p/D9tHvYcNpWEA4T2CWMSknc35vHW1RoFpHq2iF 1l++hxBUGHE+RCsmXSTPxge4GpZTeHst1rBzIbEgqyixvaH3leFM2NTqBBqmR2VU bDNw1q3YHi2+l6KooBztA4YLfJ1W+l/AoRZMHs3z9grq1sUWrG2PZf6T5wIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFPTXH0zC1aDUmKc60pFrwkbjDm+UMB8GA1UdIwQY MBaAFLja+n6lUxeBM+foT+64rDqdvPnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5yNmZxVlRGNEV6NS1oUDdyaXNPcDI4LWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mNTdiOTMtZDI1My00ZmJiLWEzMWUt NmI4OWZhNDY3NTdjLzEvOU5jZlRNTFZvTlNZcHpyU2tXdkNSdU1PYjVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mNTdiOTMtZDI1My00ZmJiLWEzMWUtNmI4OWZhNDY3NTdj LzEvdU5yNmZxVlRGNEV6NS1oUDdyaXNPcDI4LWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTASBAIAATAMAwQAW9GhAwQA uaDNMBsEAgACMBUDBQMqELJAAwUDKhDEwAMFAyoSiEAwDQYJKoZIhvcNAQELBQAD ggEBAAprcfWcan5Bddtp1+pfKhdZDrWLv4qMZN8O86ZDSqX9osdYnRKsqvUqL6NZ DPtvI6246MViQCld2hdgnxLagZlapp7fPAOp4oxdibJXmGbrUtcSmEXtRAyqf9/A 2fUgA6E+bSyl6+A2mlGq1l95dzAv2oIcM6kuWexwSPY8Gix7LE2z7u3JDcxKVnyq /cI2lslNJQlryYUFYlpBoRTTzZ0iug0cFzLaQZ2RnNbpNpToNA5E+55jX4PSuOYP B9wELvJISGmKiChgkmY3vnwOePUEOz0RCdgUzDJutzFormCImmf7SQzwlWX7rwhK S8mQwNRnaov2C+VupBe2JJOiHvI= -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:32 2026 by rpki-client